Last updated: July 2026
Information covered
This policy covers financial statements, management and organizational data, contracts, project records, workforce information, commercial and operational data, licenses, certificates, and any material provided for assessment, proposals, or consulting delivery.
Permitted use
Client information is used only to assess readiness, review classification, qualification, or licensing requirements, prepare proposals, deliver agreed consulting services, and produce related analysis and outputs.
Confidentiality controls
- Access is limited to team members and advisers who need the information for the engagement.
- Client information is not shared with third parties without permission unless legally required.
- Files are organized and protected to reduce unauthorized access, loss, or disclosure.
Relevant third parties
Where delivery requires limited sharing with authorities, auditors, or specialist advisers, information is shared only as necessary and subject to applicable agreements and legal requirements.
Retention and disposal
Information is retained for the period needed to deliver the engagement and meet professional or legal obligations, then securely returned, destroyed, or anonymized where appropriate.
Consulting materials
Proposals, studies, methodologies, tools, and templates created by ISTMRAR remain its intellectual property unless a written agreement states otherwise.
Legally required disclosure
Information may be disclosed where required by law, court order, or a competent authority. The client will be informed where legally permitted.
Continuing obligation
Confidentiality obligations continue after the project or professional relationship ends for as long as the information remains confidential.
Contact
For confidentiality enquiries, contact info@istmrar.com.